SUSE-SU-2015:1478-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2015/suse-su-20151478-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1478-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2015:1478-1
Related
Published
2015-08-20T15:22:44Z
Modified
2015-08-20T15:22:44Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise Server 11 SP2 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed: - CVE-2015-5707: An integer overflow in the SCSI generic driver could be potentially used by local attackers to crash the kernel or execute code. - CVE-2015-2830: arch/x86/kernel/entry64.S in the Linux kernel did not prevent the TSCOMPAT flag from reaching a user-mode task, which might have allowed local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16 (bnc#926240). - CVE-2015-0777: drivers/xen/usbback/usbback.c in the Linux kernel allowed guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors (bnc#917830). - CVE-2015-2150: Xen and the Linux kernel did not properly restrict access to PCI command registers, which might have allowed local guest users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response (bnc#919463). - CVE-2015-5364: A remote denial of service (hang) via UDP flood with incorrect package checksums was fixed. (bsc#936831). - CVE-2015-5366: A remote denial of service (unexpected error returns) via UDP flood with incorrect package checksums was fixed. (bsc#936831). - CVE-2015-1420: CVE-2015-1420: Race condition in the handletopath function in fs/fhandle.c in the Linux kernel allowed local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handlebytes value of a file handle during the execution of this function (bnc#915517). - CVE-2015-4700: A local user could have created a bad instruction in the JIT processed BPF code, leading to a kernel crash (bnc#935705). - CVE-2015-1805: The (1) piperead and (2) pipewrite implementations in fs/pipe.c in the Linux kernel did not properly consider the side effects of failed _copytouserinatomic and _copyfromuserinatomic calls, which allowed local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an 'I/O vector array overrun' (bnc#933429). - CVE-2015-3331: The _driverrfc4106decrypt function in arch/x86/crypto/aesni-intelglue.c in the Linux kernel did not properly determine the memory locations used for encrypted data, which allowed context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AFALG(aead) socket (bnc#927257). - CVE-2015-2922: The ndiscrouterdiscovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel allowed remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement (RA) message (bnc#922583). - CVE-2015-2041: net/llc/sysctlnetllc.c in the Linux kernel used an incorrect data type in a sysctl table, which allowed local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry (bnc#919007). - CVE-2015-3636: The pingunhash function in net/ipv4/ping.c in the Linux kernel did not initialize a certain list data structure during an unhash operation, which allowed local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCKDGRAM socket system call for the IPPROTOICMP or IPPROTOICMPV6 protocol, and then making a connect system call after a disconnect (bnc#929525). - CVE-2014-8086: Race condition in the ext4filewriteiter function in fs/ext4/file.c in the Linux kernel allowed local users to cause a denial of service (file unavailability) via a combination of a write action and an FSETFL fcntl operation for the ODIRECT flag (bnc#900881). - CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel did not properly restrict use of User Verbs for registration of memory regions, which allowed local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/ (bnc#914742). - CVE-2014-9683: Off-by-one error in the ecryptfsdecodefromfilename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel allowed local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted filename (bnc#918333). - CVE-2015-2042: net/rds/sysctl.c in the Linux kernel used an incorrect data type in a sysctl table, which allowed local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry (bnc#919018). - CVE-2015-1421: Use-after-free vulnerability in the sctpassoc_update function in net/sctp/associola.c in the Linux kernel allowed remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data (bnc#915577).

The following non-security bugs were fixed: - HID: add ALWAYSPOLL quirk for a Logitech 0xc007 (bnc#931474). - HID: add HP OEM mouse to quirk ALWAYSPOLL (bnc#931474). - HID: add quirk for PIXART OEM mouse used by HP (bnc#931474). - HID: usbhid: add always-poll quirk (bnc#931474). - HID: usbhid: add another mouse that needs QUIRKALWAYSPOLL (bnc#931474). - HID: usbhid: enable always-poll quirk for Elan Touchscreen 009b (bnc#931474). - HID: usbhid: enable always-poll quirk for Elan Touchscreen 0103 (bnc#931474). - HID: usbhid: enable always-poll quirk for Elan Touchscreen 016f (bnc#931474). - HID: usbhid: enable always-poll quirk for Elan Touchscreen. - HID: usbhid: fix PIXART optical mouse (bnc#931474). - HID: usbhid: more mice with ALWAYSPOLL (bnc#931474). - HID: usbhid: yet another mouse with ALWAYSPOLL (bnc#931474). - bnx2x: Fix kdump when iommu=on (bug#921769). - cifs: fix use-after-free bug in findwritablefile (bnc#909477). - coredump: ensure the fpu state is flushed for proper multi-threaded core dump (bsc#904671, bsc#929360). - dm: fixed that LVM merge snapshot of root logical volume were not working (bsc#928801) - deal with deadlock in dwalk fix (bnc#929148, bnc#929283). - e1000: do not enable dma receives until after dma address has been setup (bsc#821931). - fsnotify: Fix handling of renames in audit (bnc#915200). - inet: add a redirect generation id in inetpeer (bnc#860593). - inetpeer: initialize ->redirectgenid in inetgetpeer() (bnc#860593). - kabi: hide bnc#860593 changes of struct inetpeeraddrbase (bnc#860593). - kernel: fix data corruption when reading /proc/sysinfo (bsc#891087, bsc#937986, LTC#114480). - libata: prevent HSM state change race between ISR and PIO (bsc#923245). - time, ntp: Do not update timestate in middle of leap second (bsc#912916). - s390-3215-tty-close-crash.patch: kernel: 3215 tty close crash (bsc#916010, LTC#120873). - s390-3215-tty-close-race.patch: kernel: 3215 console crash (bsc#916010, LTC#94302). - s390-3215-tty-hang.patch: Renamed from patches.arch/s390-tty-hang.patch. - s390-3215-tty-hang.patch: Update references (bnc#898693, bnc#897995, LTC#114562). - s390-dasd-retry-partition-detection.patch: s390/dasd: retry partition detection (bsc#916010, LTC#94302). - s390-dasd-retry-partition-detection.patch: Update references (bsc#916010, LTC#120565). - s390-sclp-tty-refcount.patch: kernel: sclp console tty reference counting (bsc#916010, LTC#115466). - scsi: vmwpvscsi: Fix pvscsiabort() function (bnc#940398 bsc#930934). - scsi/sg: sgstartreq(): make sure that there is not too many elements in iovec (bsc#940338). - x86, xsave: remove threadhasfpu() bug check in _sanitizei387state() (bsc#904671, bsc#929360). - x86-mm-send-tlb-flush-ipis-to-online-cpus-only.patch: x86, mm: Send tlb flush IPIs to online cpus only (bnc#798406). - x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032). - x86/reboot: Fix a warning message triggered by stopothercpus() (bnc#930284). - xen: Correctly re-enable interrupts in xenspin_wait() (bsc#879878, bsc#908870). - xfs: prevent deadlock trying to cover an active log (bsc#917093).

References

Affected packages

SUSE:Linux Enterprise Server 11 SP2-LTSS / kernel-default

Package

Name
kernel-default
Purl
purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.101-0.7.37.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default-base": "3.0.101-0.7.37.1",
            "kernel-default-man": "3.0.101-0.7.37.1",
            "kernel-ec2": "3.0.101-0.7.37.1",
            "kernel-default": "3.0.101-0.7.37.1",
            "kernel-source": "3.0.101-0.7.37.1",
            "kernel-pae-base": "3.0.101-0.7.37.1",
            "kernel-syms": "3.0.101-0.7.37.1",
            "kernel-trace": "3.0.101-0.7.37.1",
            "kernel-pae": "3.0.101-0.7.37.1",
            "kernel-trace-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-base": "3.0.101-0.7.37.1",
            "kernel-xen-devel": "3.0.101-0.7.37.1",
            "kernel-xen-base": "3.0.101-0.7.37.1",
            "kernel-trace-base": "3.0.101-0.7.37.1",
            "kernel-default-devel": "3.0.101-0.7.37.1",
            "kernel-pae-devel": "3.0.101-0.7.37.1",
            "kernel-xen": "3.0.101-0.7.37.1"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP2-LTSS / kernel-ec2

Package

Name
kernel-ec2
Purl
purl:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.101-0.7.37.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default-base": "3.0.101-0.7.37.1",
            "kernel-default-man": "3.0.101-0.7.37.1",
            "kernel-ec2": "3.0.101-0.7.37.1",
            "kernel-default": "3.0.101-0.7.37.1",
            "kernel-source": "3.0.101-0.7.37.1",
            "kernel-pae-base": "3.0.101-0.7.37.1",
            "kernel-syms": "3.0.101-0.7.37.1",
            "kernel-trace": "3.0.101-0.7.37.1",
            "kernel-pae": "3.0.101-0.7.37.1",
            "kernel-trace-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-base": "3.0.101-0.7.37.1",
            "kernel-xen-devel": "3.0.101-0.7.37.1",
            "kernel-xen-base": "3.0.101-0.7.37.1",
            "kernel-trace-base": "3.0.101-0.7.37.1",
            "kernel-default-devel": "3.0.101-0.7.37.1",
            "kernel-pae-devel": "3.0.101-0.7.37.1",
            "kernel-xen": "3.0.101-0.7.37.1"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP2-LTSS / kernel-pae

Package

Name
kernel-pae
Purl
purl:rpm/suse/kernel-pae&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.101-0.7.37.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default-base": "3.0.101-0.7.37.1",
            "kernel-default-man": "3.0.101-0.7.37.1",
            "kernel-ec2": "3.0.101-0.7.37.1",
            "kernel-default": "3.0.101-0.7.37.1",
            "kernel-source": "3.0.101-0.7.37.1",
            "kernel-pae-base": "3.0.101-0.7.37.1",
            "kernel-syms": "3.0.101-0.7.37.1",
            "kernel-trace": "3.0.101-0.7.37.1",
            "kernel-pae": "3.0.101-0.7.37.1",
            "kernel-trace-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-base": "3.0.101-0.7.37.1",
            "kernel-xen-devel": "3.0.101-0.7.37.1",
            "kernel-xen-base": "3.0.101-0.7.37.1",
            "kernel-trace-base": "3.0.101-0.7.37.1",
            "kernel-default-devel": "3.0.101-0.7.37.1",
            "kernel-pae-devel": "3.0.101-0.7.37.1",
            "kernel-xen": "3.0.101-0.7.37.1"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP2-LTSS / kernel-source

Package

Name
kernel-source
Purl
purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.101-0.7.37.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default-base": "3.0.101-0.7.37.1",
            "kernel-default-man": "3.0.101-0.7.37.1",
            "kernel-ec2": "3.0.101-0.7.37.1",
            "kernel-default": "3.0.101-0.7.37.1",
            "kernel-source": "3.0.101-0.7.37.1",
            "kernel-pae-base": "3.0.101-0.7.37.1",
            "kernel-syms": "3.0.101-0.7.37.1",
            "kernel-trace": "3.0.101-0.7.37.1",
            "kernel-pae": "3.0.101-0.7.37.1",
            "kernel-trace-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-base": "3.0.101-0.7.37.1",
            "kernel-xen-devel": "3.0.101-0.7.37.1",
            "kernel-xen-base": "3.0.101-0.7.37.1",
            "kernel-trace-base": "3.0.101-0.7.37.1",
            "kernel-default-devel": "3.0.101-0.7.37.1",
            "kernel-pae-devel": "3.0.101-0.7.37.1",
            "kernel-xen": "3.0.101-0.7.37.1"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP2-LTSS / kernel-syms

Package

Name
kernel-syms
Purl
purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.101-0.7.37.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default-base": "3.0.101-0.7.37.1",
            "kernel-default-man": "3.0.101-0.7.37.1",
            "kernel-ec2": "3.0.101-0.7.37.1",
            "kernel-default": "3.0.101-0.7.37.1",
            "kernel-source": "3.0.101-0.7.37.1",
            "kernel-pae-base": "3.0.101-0.7.37.1",
            "kernel-syms": "3.0.101-0.7.37.1",
            "kernel-trace": "3.0.101-0.7.37.1",
            "kernel-pae": "3.0.101-0.7.37.1",
            "kernel-trace-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-base": "3.0.101-0.7.37.1",
            "kernel-xen-devel": "3.0.101-0.7.37.1",
            "kernel-xen-base": "3.0.101-0.7.37.1",
            "kernel-trace-base": "3.0.101-0.7.37.1",
            "kernel-default-devel": "3.0.101-0.7.37.1",
            "kernel-pae-devel": "3.0.101-0.7.37.1",
            "kernel-xen": "3.0.101-0.7.37.1"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP2-LTSS / kernel-trace

Package

Name
kernel-trace
Purl
purl:rpm/suse/kernel-trace&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.101-0.7.37.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default-base": "3.0.101-0.7.37.1",
            "kernel-default-man": "3.0.101-0.7.37.1",
            "kernel-ec2": "3.0.101-0.7.37.1",
            "kernel-default": "3.0.101-0.7.37.1",
            "kernel-source": "3.0.101-0.7.37.1",
            "kernel-pae-base": "3.0.101-0.7.37.1",
            "kernel-syms": "3.0.101-0.7.37.1",
            "kernel-trace": "3.0.101-0.7.37.1",
            "kernel-pae": "3.0.101-0.7.37.1",
            "kernel-trace-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-base": "3.0.101-0.7.37.1",
            "kernel-xen-devel": "3.0.101-0.7.37.1",
            "kernel-xen-base": "3.0.101-0.7.37.1",
            "kernel-trace-base": "3.0.101-0.7.37.1",
            "kernel-default-devel": "3.0.101-0.7.37.1",
            "kernel-pae-devel": "3.0.101-0.7.37.1",
            "kernel-xen": "3.0.101-0.7.37.1"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP2-LTSS / kernel-xen

Package

Name
kernel-xen
Purl
purl:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.101-0.7.37.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default-base": "3.0.101-0.7.37.1",
            "kernel-default-man": "3.0.101-0.7.37.1",
            "kernel-ec2": "3.0.101-0.7.37.1",
            "kernel-default": "3.0.101-0.7.37.1",
            "kernel-source": "3.0.101-0.7.37.1",
            "kernel-pae-base": "3.0.101-0.7.37.1",
            "kernel-syms": "3.0.101-0.7.37.1",
            "kernel-trace": "3.0.101-0.7.37.1",
            "kernel-pae": "3.0.101-0.7.37.1",
            "kernel-trace-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-devel": "3.0.101-0.7.37.1",
            "kernel-ec2-base": "3.0.101-0.7.37.1",
            "kernel-xen-devel": "3.0.101-0.7.37.1",
            "kernel-xen-base": "3.0.101-0.7.37.1",
            "kernel-trace-base": "3.0.101-0.7.37.1",
            "kernel-default-devel": "3.0.101-0.7.37.1",
            "kernel-pae-devel": "3.0.101-0.7.37.1",
            "kernel-xen": "3.0.101-0.7.37.1"
        }
    ]
}